{"id":1886938,"url":"https://alion.io/job/basf-cyber-security-risk-specialist-mfd","title":"Cyber Security Risk Specialist (m/f/d)","company":{"id":96193,"name":"BASF","domain":"basf.com","url":"https://alion.io/company/basf-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":95000,"period":"year","method":"role_country_seniority_unknown","sample_n":20},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Power BI","optional":false},{"name":"SharePoint","optional":false}],"status":"live","first_seen_at":"2026-10-05T02:59:01Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-18T16:41:44Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"ABOUT US\nAt BASF Digital Hub Madrid we develop innovative digital solutions for BASF, create new exciting customer experiences and business growth, and drive efficiencies in processes, helping to strengthen BASF´s position as the digital leader in the chemical industry. We believe the right path is through creativity, trial and error and great people working and learning together. Become part of our team and develop the future with us - in a global team that embraces diversity and equal opportunities.\nWe are seeking an experienced Cyber Security Risk Specialist to join our CISO organization. As part of the Cyber Security Risk Management team, you will contribute to the development, implementation, and maintenance of our cyber security risk management framework.\nRESPONSIBILITIES\nYou will be a part of our Cyber Governance, Risk and Compliance (GRC) Product Family, which is the pilar of the second Line of Defense (2LoD) and manages the Cyber Security Framework for the whole BASF Group, following a risk-based approach. One major part of that is to develop and implement risk management tools, policies, and procedures in line with ISO 27001 and other relevant standards. Your core responsibilities will be:\nProvide support to Asset Owners and Risk Owners to facilitate the operationalization of Cyber Risk Management-related processes across both IT and OT (Automation Technology) environments,\nFoster collaboration with our global Risk Community, incl. OT stakeholders, by actively gathering their feedback, while effectively communicating updates and enhancements to ensure alignment and engagement.\nProvide awareness materials and moderate training sessions on Cyber Security Risk Management with dedicated modules for OT environments to promote continuous learning and compliance towards BASF Business Units\nDerive new processes or pilots to strengthen GRC in response to the evolving threat landscape in IT and OT (Automation Technology)\nConduct research on new threats by leveraging different sources such as Google Threat Intelligence or Dragos\nExecute strategic risk assessments on-demand to identify and evaluate emerging risks in IT and OT, including risks to production continuity, safety, and environmental impact, that could negatively affect or harm BASF\nMaintain and improve the toolset that our team provides (RSA Archer, Power BI, Knowledge Base within SharePoint) ensuring integration of OT-specific risk scenarios, asset classifications, and network segmentation (e.g., Purdue model layers)\nAggregate operational risks and translate asset-specific risks to generic risk scenarios on enterprise level to support senior management reporting and strategic as well as tactical decision-making\nSupport the lifecycle update of group-wide cyber security governance regulations based on generic BASF risk landscape\nWork closely with cross-functional teams to support compliance of risk management processes with ISMS according to ISO 27001 and OT security requirements\nCollaborate with Asset Owners and Risk Owners to maintain a risk register of IT and OT risks and associated risk treatment plans up to date\nMonitor and report on the effectiveness of risk management controls including OT-specific compensating controls (e.g., network segmentation, jump hosts, monitoring) and support the reporting of significant risks to senior management.\nQUALIFICATIONS\nBachelor’s degree in computer science, Information Technology, or a related field\nExperience with developing, implementing, and maintaining an ISMS based on ISO 27001 and familiarity with IEC 62443 or comparable OT security frameworks\nProfound experience in cyber security, particularly in GRC and cyber security risk management across IT and OT environments\nStrong experience in security for automation and laboratory environments, including industrial control systems (ICS), SCADA, DCS, PLCs, and LIMS/PIMSSolid understanding of OT architectures and concepts (e.g., Purdue Model, network segmentation, zones and conduits) and their implications for cyber risk management\nStrong understanding of risk management principles, frameworks and practices, especially in the field of risk aggregation as well as definition and evaluation of generic risks on enterprise level\nExperience with risk assessments, cyber threats and vulnerabilities\nKnowledge of relevant laws and regulations related to cyber security and OT security\nAbility to bridge communication between IT security teams and OT/engineering stakeholders in production environments\nExcellent communication and interpersonal skills, with the ability to work effectively with internal team members and cross-functional teams\nRelevant certifications such as CISSP, CISM, CRISC are a plus additional OT-focused certifications (e.g., GICSP, ISA/IEC 62443) are highly desirable\nBENEFITS\nA secure work environment because your health, safety and wellbeing is always our top priority.\nFlexible work schedule and Home-office options, so that you can balance your working life and private life.\nLearning and development opportunities\n25 holiday days per year\n5 additional days (readjustment)\nA collaborative, trustful and innovative work environment\nBeing part of an international team and work in global projects\nRelocation assistance to Madrid provided\nAt BASF, the chemistry is right.\nBecause we are counting on innovative solutions, sustainable actions, connected thinking and on you, become a part of our formula for success and develop the future with us - in a global team that embraces diversity and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.\nAt BASF, we are committed to upholding and ensuring compliance with company standards related to quality, environment, health, safety, and energy, in line with our global guidelines.\nWe actively promote a culture of prevention and continuous improvement, encouraging collaboration in initiatives related to quality, environmental protection, health, safety, and energy performance.\nWe foster responsible energy use, promoting efficiency in daily operations and supporting the identification of improvement projects and energy-saving opportunities.\nContact\nDo you have any questions about the application process or the position? Please reach out to Felipe Bianco ()","description_format":"text","description_chars":6331,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule","Relocation assistance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Farming & Agriculture","AgTech","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-05T02:59:01Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Graduate Trainee, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Global Business Mobility: Graduate Trainee; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.471,"p_room":0.45,"age_days":12,"expected_fill_days":7,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/basf-cyber-security-risk-specialist-mfd","json_url":"https://alion.io/job/basf-cyber-security-risk-specialist-mfd.json","meta":{"generated_at":"2026-10-18T19:01:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23419,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":96193},"rest":"https://alion.io/mcp/rest/get_company?id=96193"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbasf-cyber-security-risk-specialist-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbasf-cyber-security-risk-specialist-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbasf-cyber-security-risk-specialist-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/basf-cyber-security-risk-specialist-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbasf-cyber-security-risk-specialist-mfd"}]}